Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
File:                     ee65ad11-73c6-378b-9f9e-179df4feaa37.roa (raw, json)
Hash identifier:          F2aM9z2s9zrRUwRCHz+lN7N6pkRE90KOi/IZW09+1O4=
Subject key identifier:   92:9C:45:9C:F6:7D:30:0C:5B:35:11:BC:CF:34:BD:ED:B7:96:04:4C
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F4328584905B6AD05BFA4A854E67F3300
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     399864
IP address blocks:        45.41.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ad:05:bf:a4:a8:54:e6:7f:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=8787d568-eba6-4d31-9e21-6b131ecb2f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:57:8a:48:ae:0c:08:da:6f:79:34:3a:75:
                    0a:40:2b:01:cf:47:af:92:51:bf:75:9d:d5:99:91:
                    70:d2:87:84:f8:cd:21:7c:bb:19:f2:c3:79:b1:2e:
                    4e:25:54:46:29:cc:c9:35:97:5d:b1:1b:e2:67:5a:
                    2a:4a:b9:d1:86:5b:02:b9:81:ee:4f:48:d2:92:5f:
                    a4:66:72:63:5f:85:b8:23:0c:14:6e:b1:cc:e4:b7:
                    d8:15:95:38:76:f9:93:38:aa:15:00:d3:2e:f0:25:
                    ba:a3:97:5e:eb:6b:dd:91:30:c2:6c:80:15:a3:f6:
                    25:48:0f:59:57:4d:a5:77:c7:b8:6e:a2:e3:13:18:
                    c5:93:e2:e2:52:83:ba:e9:78:cd:73:f1:22:e1:d6:
                    df:7e:33:77:9a:ed:71:21:53:51:87:03:14:23:5b:
                    37:5f:7c:24:c3:58:71:2b:23:eb:95:fe:ea:8c:56:
                    d7:ca:a5:b4:0d:f9:f4:a0:dc:9d:71:e4:39:b0:03:
                    34:96:5c:96:ca:91:37:ab:ee:91:81:a8:1a:4a:9a:
                    0a:bd:ce:fd:ba:45:39:c0:8c:86:cb:0f:6d:38:2b:
                    aa:29:7a:2b:7e:e6:71:f4:f0:81:63:82:5f:4f:c7:
                    b7:a8:74:bb:34:aa:55:4f:05:df:b3:30:d4:cb:b4:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:45:9C:F6:7D:30:0C:5B:35:11:BC:CF:34:BD:ED:B7:96:04:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/ee65ad11-73c6-378b-9f9e-179df4feaa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier:
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:31:03:42:99:4f:9f:90:49:ee:4e:4f:c6:a0:7c:72:9b:ee:
         f1:89:4b:ff:45:f3:04:d1:9b:7a:d2:77:48:a2:dc:6b:45:85:
         fb:8e:46:09:32:95:d2:db:f1:ec:7d:a8:a9:44:0a:1f:97:be:
         3a:97:71:54:5e:6f:79:4e:e2:28:62:f3:cf:e2:f4:14:d0:2b:
         a2:db:a4:59:92:46:7c:b1:68:66:03:ac:76:5d:35:e4:46:66:
         46:cd:ed:e0:2f:70:2e:94:7c:6d:31:44:71:33:d8:3c:d7:40:
         fd:37:e4:7e:18:1a:22:90:cf:a6:b3:08:ff:fa:da:fd:6b:37:
         27:57:f7:ef:c9:54:51:b3:d1:c1:c8:00:f6:c0:32:94:99:37:
         44:ee:a4:d6:96:0a:88:51:e6:5a:f5:0f:6a:dc:b6:b7:48:06:
         3d:6b:e3:c3:cc:36:34:58:87:c1:74:3e:2f:a7:67:31:d6:28:
         b2:ec:c9:ba:b5:ca:bd:6a:92:8a:ce:db:51:30:b6:83:71:6c:
         67:f8:9f:b8:35:2e:57:c3:66:0b:87:9a:54:b4:44:e3:b3:de:
         00:1a:ef:13:09:7b:65:dc:82:3e:4b:05:2f:a8:3c:c0:0c:31:
         a4:7b:2d:a5:ea:c5:6d:7e:d4:51:cc:9d:0b:70:f4:10:c8:95:
         bb:9d:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:46 2025 by rpki-client